CVE-2023-48395 — Kaifa Technology WebITR - SQL Injection
Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege ca…
Published: 2023-12-15 · CVSS: 6.5 · CVSS 3.1
Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7